Privacy Policy — xo3bet

1 Introduction

This Privacy Policy ("Policy") is published by xo3bet ("xo3bet", "we", "us", "our") and applies to all personal data collected from individuals ("User", "you", "your") who access or use the xo3bet website, mobile interface, and associated services (collectively, the "Platform" or "Services").

xo3bet is an online betting platform that serves players across Pakistan — including users in Karachi, Lahore, Islamabad, Rawalpindi, Faisalabad, Multan and Peshawar — with sports betting, live casino games and a broad catalogue of slot titles. In the course of providing these Services, xo3bet necessarily collects and processes personal data relating to its registered users.

This Policy should be read alongside our Terms & Conditions and Responsible Gambling Policy, which together govern your use of the xo3bet Services.

xo3bet does not represent that this Policy satisfies the specific requirements of any particular national data protection law unless explicitly stated. Pakistani users should be aware that Pakistan's Personal Data Protection Bill (and any enacted successor legislation) may confer specific rights and impose specific obligations applicable to data collected from or stored about Pakistani residents. This Policy does not constitute legal advice.

2 Definitions

In this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" means any information relating to an identified or identifiable natural person — including name, email address, date of birth, IP address, payment details and device identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, adaptation, use, disclosure, transmission or deletion.
• "Data Controller" means xo3bet, the entity that determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party engaged by xo3bet to process Personal Data on its behalf and under its instructions.
• "KYC Data" means identity and age verification documents and information collected in connection with xo3bet's Know Your Customer obligations, including CNIC copies, passport scans and related proof-of-identity materials.
• "Sensitive Personal Data" means a defined sub-category of Personal Data warranting enhanced protection, including financial information, identity document details and data relating to gambling behaviour.
• "Cookies" means small text files placed on your device by the Platform for the purposes described in Section 10.
• "Third Party" means any natural or legal person that is not xo3bet or the User.

3 Data We Collect

xo3bet collects Personal Data in the following categories, depending on the nature of your interaction with the Platform:

3.1 Registration Data

When you create an account, we collect: full legal name; date of birth; email address; country of residence; preferred currency (PKR for Pakistani users); and any optional profile information you choose to provide.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) regulations and age verification obligations, we may collect: copies of your NADRA-issued CNIC or passport; proof of address documentation; selfie or liveness-check images; and payment method verification documents. These are processed exclusively through secure, encrypted channels.

3.3 Financial & Transaction Data

Records of deposits, withdrawals, bets placed and game activity — including transaction values in PKR and the payment method category used (for example, mobile wallet or bank transfer). Specific account numbers or wallet credentials are processed by our payment processors and are not stored in their entirety by xo3bet. Payment providers referenced on this platform (including Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank and Bank Alfalah) are mentioned solely as familiar Pakistani payment rails and are not affiliated with or endorsing xo3bet.

3.4 Technical & Usage Data

IP address; device type, model and operating system; browser type and version; session timestamps; pages visited; features used; error logs; and referring URL. This data is collected automatically when you access the Platform.

3.5 Communication Data

Records of your interactions with xo3bet's customer support team, including support chat transcripts and email correspondence, where you have initiated contact.

3.6 Responsible Gambling Data

Any deposit limits, loss limits, session time limits or self-exclusion elections you set via your account, together with the data generated by responsible gambling monitoring tools used by xo3bet to identify and respond to potentially harmful gambling patterns.

4 How We Collect Personal Data

xo3bet collects Personal Data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, place a bet, contact support, set responsible gambling limits, or otherwise interact with the Platform.
• Automatically: Technical and usage data is collected automatically via cookies, web beacons and server logs when you access the Platform. See Section 10 for full details of our cookie practices.
• From third parties: xo3bet may receive verification data from identity-verification service providers engaged to assist with KYC compliance. We may also receive fraud-prevention signals from payment processors where relevant to protecting your account.

5 Data Processing & Legal Basis

xo3bet processes your Personal Data on the following legal bases:

6 How We Use Your Personal Data

xo3bet uses Personal Data collected from you for the following defined purposes:

• To create, manage and maintain your account and verify your identity and age.
• To process deposits, wagers and withdrawal requests and to maintain accurate transaction records.
• To comply with AML obligations, including transaction monitoring and reporting where legally required.
• To detect, investigate and prevent fraudulent activity, account abuse and prohibited conduct as defined in our Terms & Conditions.
• To operate and improve the Platform, including diagnosing technical issues, analysing usage patterns and enhancing user experience.
• To communicate with you in connection with your account — including security alerts, verification notices, withdrawal confirmations and policy updates.
• To monitor gambling behaviour for responsible gambling purposes and to apply limits, alerts or interventions where required by our Responsible Gambling obligations.
• To respond to customer support enquiries.

7 Data Sharing & Disclosure

xo3bet shares Personal Data only in the following limited circumstances, and only to the extent necessary for the defined purpose:

7.1 Service Providers (Data Processors)

xo3bet engages third-party service providers to perform specific functions on its behalf, including: payment processing; identity verification (KYC); fraud detection; platform hosting and infrastructure; and customer support tools. These providers process data only under xo3bet's instructions and are bound by contractual data protection obligations.

7.2 Legal & Regulatory Obligations

xo3bet may disclose Personal Data to regulatory bodies, law enforcement agencies or courts where required to do so by applicable law, a valid court order, or a binding regulatory direction — including where disclosure is required in connection with AML investigations or responsible gambling compliance requirements.

7.3 Business Continuity

In the event of a merger, acquisition, restructuring or sale of xo3bet's business or assets, Personal Data may be transferred to the successor entity subject to the same privacy protections described in this Policy. Users will be notified of any such transfer where practicable.

7.4 What We Do Not Do

• xo3bet does not sell Personal Data to third parties.
• xo3bet does not share Personal Data with advertising networks for third-party marketing profiling.
• xo3bet does not share your data with payment providers (such as Easypaisa, JazzCash, Raast, HBL, UBL, Meezan Bank or Bank Alfalah) beyond what is strictly necessary to process your individual transaction. Sharing such data does not create any relationship between those providers and xo3bet beyond that transaction.

8 Data Retention

xo3bet retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy legal, regulatory, accounting and reporting obligations.

The following indicative retention periods apply:

• Account data and transaction records: Retained for a minimum of five (5) years following account closure, in accordance with standard AML record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following the completion of the relevant verification, or longer if required by applicable regulation.
• Support communications: Retained for up to three (3) years from the date of the relevant interaction.
• Technical and usage logs: Typically retained for twelve (12) months from the date of collection for platform security and performance purposes.

Following the applicable retention period, Personal Data is securely deleted or anonymised in accordance with our data destruction procedures. Anonymised aggregate data may be retained indefinitely for statistical and platform-improvement purposes.

9 Your Rights

Subject to applicable data protection law, you have the following rights in relation to your Personal Data held by xo3bet:

• Right of access: You may request a copy of the Personal Data xo3bet holds about you.
• Right to rectification: You may request that inaccurate or incomplete Personal Data be corrected or completed.
• Right to erasure ("right to be forgotten"): You may request deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations (such as AML record-keeping requirements).
• Right to restriction of processing: You may request that xo3bet restrict the processing of your Personal Data in defined circumstances, for example while a rectification request is under review.
• Right to data portability: Where technically feasible and legally applicable, you may request that your data be provided to you in a structured, commonly used and machine-readable format.
• Right to object: You may object to processing carried out on the basis of legitimate interests where your individual circumstances warrant it.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time, without affecting the lawfulness of prior processing.

Please note that certain rights may be limited where data retention is required by law — for example, AML legislation requires xo3bet to retain KYC and transaction records for defined minimum periods regardless of an erasure request.

10 Cookies & Tracking Technologies

xo3bet uses cookies and similar technologies (including web beacons and session tokens) on the Platform for the following purposes:

10.1 Essential Cookies

Required for the Platform to function. These include session authentication tokens (which keep you logged in during your session) and security cookies (which help detect and prevent fraudulent access). These cannot be disabled without preventing normal use of the Platform.

10.2 Analytics Cookies

Used to collect anonymised or pseudonymised usage data — for example, which pages are most visited, session durations, and error rates. This data helps xo3bet improve Platform performance and user experience. Analytics cookies do not identify you personally.

10.3 Responsible Gambling Monitoring Cookies

Used to support xo3bet's responsible gambling monitoring obligations, including tracking session duration for the purpose of delivering session-time reminders and maintaining the state of your responsible gambling settings across sessions.

10.4 Cookie Management

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the Platform's core functions, but may affect certain performance-analytics features. Essential cookies cannot be disabled via browser settings without also preventing basic Platform functionality.

11 Data Security

xo3bet implements appropriate technical and organisational measures to protect Personal Data against unauthorised access, accidental loss, destruction, alteration or disclosure. These measures include:

• TLS/SSL encryption for all data in transit between your device and the Platform.
• Encryption of sensitive data fields (including payment data and KYC document references) at rest.
• Role-based access controls ensuring that Personal Data is accessible only to personnel who require it in the performance of their duties.
• Regular security assessments and penetration testing of platform infrastructure.
• Incident response procedures for the detection, containment and notification of data security incidents.

12 Children's Privacy

The xo3bet Platform is strictly intended for individuals aged 18 years and over, or the higher minimum age required by the operator's license jurisdiction. xo3bet does not knowingly collect Personal Data from minors.

If xo3bet becomes aware that a user is under the applicable minimum age, the account will be immediately suspended, all balances will be withheld pending investigation, and the Personal Data of the minor will be deleted in accordance with our retention and security procedures.

If you are a parent or guardian and believe a minor has registered an account on xo3bet, please contact us immediately using the details in Section 15.

13 International Data Transfers

xo3bet operates as a global online platform. In the course of providing the Services, your Personal Data may be transferred to, stored in, or processed in countries other than your country of residence — including countries whose data protection laws may differ from those applicable in Pakistan.

Where such transfers occur, xo3bet takes reasonable steps to ensure that appropriate safeguards are in place — for example, through contractual data protection clauses with receiving parties — to protect your Personal Data in a manner consistent with the standards described in this Policy.

By using the xo3bet Platform, you acknowledge and consent to the transfer of your Personal Data to such jurisdictions where necessary for the delivery of the Services.

14 Policy Amendments

xo3bet reserves the right to update or amend this Privacy Policy at any time. Where changes are material, xo3bet will notify registered users by email or by a prominent notice on the Platform prior to the changes taking effect.

The "Effective Date" stated at the top of this Policy indicates the date on which the current version came into force. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the updated terms.

We recommend reviewing this Policy periodically. The most current version will always be accessible at /privacy-policy.

15 Contact Us

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a privacy-related concern, please contact xo3bet's support team: